$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8167b956-49b6-4bfc-b015-6dcca357c141.roa File: 8167b956-49b6-4bfc-b015-6dcca357c141.roa (raw, json) Hash identifier: OpBcghCZAPX0gM935H1qMOTu1eKseuSp+Y3Cg5D1OW0= Subject key identifier: 2C:1C:1F:A0:BA:4E:C8:78:D3:03:58:89:8B:2F:7A:C0:AD:BB:13:77 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77FE7D27B2A61C26F268764D7377082B92519D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8167b956-49b6-4bfc-b015-6dcca357c141.roa Signing time: Tue 19 May 2026 00:00:58 +0000 ROA not before: Tue 19 May 2026 00:00:58 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:fe:7d:27:b2:a6:1c:26:f2:68:76:4d:73:77:08:2b:92:51:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:00:58 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=edb44d93742ca52bd103031f61a51c70673de6aa0bd96237eba534d8e405abb2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:52:91:40:00:06:82:86:78:dd:98:06:f3: 7c:cb:6c:1e:52:de:01:37:f3:f6:93:fd:5d:64:63: 51:01:53:4c:f4:9e:d5:52:c1:c7:0b:30:b4:cf:ed: bf:65:55:aa:98:e6:4b:de:06:73:d8:53:1e:1e:0a: 01:05:e1:e8:60:50:b2:94:52:0a:2f:b2:c0:84:4f: 0b:ac:5c:63:6c:ef:30:5a:1f:8a:6d:4b:86:d4:0c: a0:09:65:4b:be:bb:c9:79:28:ef:44:ef:cc:a9:c8: 46:9e:a1:b6:8e:f9:d2:8a:5b:f0:25:75:de:5f:25: d6:9a:b9:35:9c:76:08:37:93:7a:c1:e6:cd:f8:7f: 18:a3:fc:ae:61:21:58:f2:89:49:06:5e:20:0a:ec: ac:d6:3a:92:68:7f:47:68:33:e6:6f:99:9b:c9:65: 9b:f1:38:1c:33:c0:ea:67:a4:bd:16:26:56:56:d1: df:d4:58:9c:fd:93:65:0d:c8:84:d0:9e:8b:45:42: 92:af:12:c2:46:24:d0:00:0e:52:8e:31:65:14:16: c7:f4:08:a7:71:97:16:21:37:04:78:68:6d:b7:b7: 8f:3f:81:72:a2:dc:de:36:82:69:90:2e:0a:f8:47: 2b:11:59:aa:7a:64:30:0a:fb:7c:0a:05:51:80:94: 09:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1C:1F:A0:BA:4E:C8:78:D3:03:58:89:8B:2F:7A:C0:AD:BB:13:77 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8167b956-49b6-4bfc-b015-6dcca357c141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:7000::/40 Signature Algorithm: sha256WithRSAEncryption 33:9c:13:98:e2:16:42:8c:7e:f6:26:a4:f6:1e:9d:89:be:8b: 16:3e:75:fa:79:fb:72:52:fd:77:ec:8c:89:02:f5:ed:f5:ee: f3:56:6a:b3:ef:da:b0:e7:09:bd:9e:b7:ed:41:7d:00:fe:35: 53:82:76:64:51:21:44:cf:bc:49:0b:7d:d4:ef:6e:bd:57:d3: 4e:49:6e:45:19:52:0e:ea:e1:64:43:ac:08:4c:2e:ce:12:18: e3:44:6e:d6:cb:0d:c2:24:9a:7e:e6:d5:b4:e7:a1:cc:3f:b4: fd:7e:ad:98:f2:96:07:a8:00:72:1f:98:8a:93:51:ef:cb:c4: 31:4a:35:86:fe:b1:0e:c9:4e:fc:79:4d:b8:52:d0:c9:23:98: ac:af:30:30:49:3b:4b:f8:1a:3f:06:f9:6d:1e:52:2b:91:e1: e8:1e:47:8b:c4:e1:f4:6c:57:c9:18:d2:13:01:fd:95:30:6c: 70:9f:27:a4:dc:39:d3:55:2a:7e:be:d1:a5:18:3c:03:5b:c5: d3:68:1a:9f:cf:bb:50:e9:0a:7a:3d:96:84:32:0f:2d:11:cc: 21:0e:d9:85:a9:55:06:ab:af:ad:3b:5d:01:1d:f1:65:9e:d2: 3b:76:50:36:06:17:1c:5a:f0:93:38:89:4b:d7:c2:b1:cc:3b: a0:d6:5a:9c -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgITd/59J7KmHCbyaHZNc3cIK5JRnTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjYwNTE5MDAwMDU4WhcN MjYwODE3MjM1OTU5WjB6MUkwRwYDVQQFE0BlZGI0NGQ5Mzc0MmNhNTJiZDEwMzAz MWY2MWE1MWM3MDY3M2RlNmFhMGJkOTYyMzdlYmE1MzRkOGU0MDVhYmIyMS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOFKRQAAGgoZ43ZgG83zLbB5S3gE3 8/aT/V1kY1EBU0z0ntVSwccLMLTP7b9lVaqY5kveBnPYUx4eCgEF4ehgULKUUgov ssCETwusXGNs7zBaH4ptS4bUDKAJZUu+u8l5KO9E78ypyEaeobaO+dKKW/Aldd5f JdaauTWcdgg3k3rB5s34fxij/K5hIVjyiUkGXiAK7KzWOpJof0doM+ZvmZvJZZvx OBwzwOpnpL0WJlZW0d/UWJz9k2UNyITQnotFQpKvEsJGJNAADlKOMWUUFsf0CKdx lxYhNwR4aG23t48/gXKi3N42gmmQLgr4RysRWap6ZDAK+3wKBVGAlAm/AgMBAAGj ggJKMIICRjAdBgNVHQ4EFgQULBwfoLpOyHjTA1iJiy96wK27E3cwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv ODE2N2I5NTYtNDliNi00YmZjLWIwMTUtNmRjY2EzNTdjMTQxLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBtrvcDANBgkqhkiG9w0BAQsFAAOCAQEAM5wTmOIWQox+9iak9h6d ib6LFj51+nn7clL9d+yMiQL17fXu81Zqs+/asOcJvZ637UF9AP41U4J2ZFEhRM+8 SQt91O9uvVfTTkluRRlSDurhZEOsCEwuzhIY40Ru1ssNwiSafubVtOehzD+0/X6t mPKWB6gAch+YipNR78vEMUo1hv6xDslO/HlNuFLQySOYrK8wMEk7S/gaPwb5bR5S K5Hh6B5Hi8Th9GxXyRjSEwH9lTBscJ8npNw501Uqfr7RpRg8A1vF02gan8+7UOkK ej2WhDIPLRHMIQ7ZhalVBquvrTtdAR3xZZ7SO3ZQNgYXHFrwkziJS9fCscw7oNZa nA== -----END CERTIFICATE-----Generated at Fri May 22 14:19:11 2026 by rpki-client